$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: q7FCWp4lIqLkdnCmm9j2+9H28iat/DWJy0b5y0cTKg8= Subject key identifier: 58:3D:C1:40:91:5D:C4:D2:6D:7C:FE:EE:40:8B:3B:A1:31:28:D3:E7 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 01B7 Signing time: Sun 09 Nov 2025 01:31:35 +0000 Manifest this update: Sun 09 Nov 2025 01:31:34 +0000 Manifest next update: Sun 16 Nov 2025 01:31:34 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: bHcgiltEx7Chzu9wCwPfPOZHqLXgfFEBmhlyJhxOykQ=) 2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=) 3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=) 4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 01:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Nov 9 01:31:34 2025 GMT Not After : Nov 16 01:31:34 2025 GMT Subject: CN=690feef7-24d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:ea:e9:7c:5b:df:3a:51:e8:43:da:47:21: 1e:f3:70:a0:a7:4c:c1:17:e1:24:15:bc:c5:f2:85: 0b:85:5e:74:bb:7b:c3:db:33:46:86:74:0f:5c:33: c3:5e:81:c8:1e:3c:4e:60:05:41:a7:31:cc:77:e8: c4:66:19:a1:b5:64:99:42:4d:b5:91:cd:45:16:56: 2f:0b:c9:52:54:bb:12:a2:5e:c9:f2:dc:50:24:88: 69:0e:17:20:8f:cf:dc:50:09:6f:74:49:c9:f7:0d: 76:65:a5:b8:b0:43:24:f7:ad:d6:2b:89:17:4b:f2: b8:c4:dd:e0:e5:52:2e:df:43:33:f2:b2:a1:84:98: 07:3d:5a:32:5c:34:9e:b0:88:ce:4e:62:fe:9f:ab: a4:e3:fc:6b:7d:2e:c4:7b:ee:e9:22:cb:b1:1f:fb: e5:ac:fa:28:b8:d3:40:ad:26:f8:d6:19:2e:39:66: 9c:91:50:7d:e3:e5:7f:ca:2e:59:b8:f6:ae:fd:31: 01:aa:96:91:be:92:8e:fe:85:e8:ca:9e:85:67:ee: d0:9e:7d:83:ba:5b:d2:60:ee:2c:00:7c:08:c2:57: 9e:ce:18:1b:a9:41:95:5f:b2:70:8e:02:2a:76:d2: 53:45:b6:bb:30:de:6c:26:b5:56:81:23:07:4e:42: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:C1:40:91:5D:C4:D2:6D:7C:FE:EE:40:8B:3B:A1:31:28:D3:E7 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a5:26:ec:09:04:6f:51:c6:34:77:1e:8f:0f:9f:6f:2f:0a: eb:15:9e:b7:c0:f7:af:5f:44:4f:6b:b4:ad:79:28:3f:a4:96: 95:77:85:de:59:ef:21:fd:84:63:39:a5:42:e0:59:f6:5e:8c: 15:59:ce:e8:69:c2:35:29:fe:53:87:4f:d5:48:09:e6:1c:f9: 89:b9:85:b8:7d:2c:d3:6b:56:48:14:ee:6d:7b:d7:27:19:8a: f6:97:c7:a8:f7:a1:3b:87:51:24:10:5c:3c:8b:f0:77:f9:af: 08:25:eb:96:ad:d8:fb:54:96:ee:db:5b:fa:b7:9d:02:a0:c6: de:4b:db:82:63:27:c7:ee:e6:ea:f3:4c:34:bf:06:e0:f7:1b: 32:8b:28:f9:fe:e1:8c:34:36:f9:05:aa:70:b3:c0:1a:77:c1: d8:8c:1f:f4:83:18:e7:fc:86:96:71:5d:09:1f:c0:02:5a:49: 9a:11:fe:51:77:51:65:c0:c1:24:4b:bf:2f:80:51:b9:fc:a2: f5:1f:da:ef:cf:48:52:c8:91:b9:3e:74:cb:d2:d1:95:8a:e6: 05:b0:4b:36:4f:c4:ef:6f:d4:34:7c:06:8f:34:7a:5d:96:73: f2:fb:d1:3b:97:56:e7:d4:f8:57:25:e6:df:db:21:53:ef:51: 2d:91:bd:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjUxMTA5MDEzMTM0WhcNMjUxMTE2MDEzMTM0WjAYMRYwFAYD VQQDEw02OTBmZWVmNy0yNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCPq6Xxb3zpR6EPaRyEe83Cgp0zBF+EkFbzF8oULhV50u3vD2zNGhnQPXDPD XoHIHjxOYAVBpzHMd+jEZhmhtWSZQk21kc1FFlYvC8lSVLsSol7J8txQJIhpDhcg j8/cUAlvdEnJ9w12ZaW4sEMk963WK4kXS/K4xN3g5VIu30Mz8rKhhJgHPVoyXDSe sIjOTmL+n6uk4/xrfS7Ee+7pIsuxH/vlrPoouNNArSb41hkuOWackVB94+V/yi5Z uPau/TEBqpaRvpKO/oXoyp6FZ+7Qnn2DulvSYO4sAHwIwleezhgbqUGVX7JwjgIq dtJTRba7MN5sJrVWgSMHTkIBEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFg9wUCR XcTSbXz+7kCLO6ExKNPnMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcpSbsCQRvUcY0dx6PD59vLwrrFZ63wPevX0RPa7SteSg/pJaVd4Xe We8h/YRjOaVC4Fn2XowVWc7oacI1Kf5Th0/VSAnmHPmJuYW4fSzTa1ZIFO5te9cn GYr2l8eo96E7h1EkEFw8i/B3+a8IJeuWrdj7VJbu21v6t50CoMbeS9uCYyfH7ubq 80w0vwbg9xsyiyj5/uGMNDb5Bapws8Aad8HYjB/0gxjn/IaWcV0JH8ACWkmaEf5R d1FlwMEkS78vgFG5/KL1H9rvz0hSyJG5PnTL0tGViuYFsEs2T8Tvb9Q0fAaPNHpd lnPy+9E7l1bn1PhXJebf2yFT71Etkb3t -----END CERTIFICATE-----Generated at Mon Nov 10 16:55:39 2025 by rpki-client